lfd down

[TheVisitors]

OK, I'm on trial license of cPanel WHM. And before purchasing it, I'd need to know I can get it working (which I hope is understandable)

Normally I'm use to Debian Linux with Direct Admin or simply apt-get install packages. So CentOS (6.3) is overall new to me and installing & managing cPanel is a whole new world.

So please be a little gentle from someone who is normally a Microsoft Windows user who typically plays with Ubuntu or Debian.

I've successfully installed cPanel WHM 11.36.0 (build 9) which is the current version. All services are running, but I keep being told lfd is down. A quick Google search tells me this is a process that helps prevent Brute-force attacks. I have mixed thoughts about such services....

While they maybe design to help keep people out, they sometimes can be a problem onto themselves (my opinion, lefts not debate it). I use incapsula.com so often people's IP addresses come from there (think CloudFlare alternative, but faster).

So I'd like to either figure out how to get this running or turn it off so that I don't need to worry about it. Whichever one is easier (I'm generally good with either solution).

 

[TheVisitors]

Service: lfd
Notification Type: failed
Notification: lfd failed @ Sun Feb 17 04:01:17 2013. A restart was attempted automagically.
Service Check Method: [check command]
Number of Restart Attempts: 309
Memory Information:

Used: 559MB
Available: 36028797018963408MB
Installed: 36028797018963968MB

Load Information: 0.01 0.00 0.00
Uptime: 1 days, 1 hours, 38 seconds
IOStat Information:

avg-cpu: %user %nice %system %iowait %steal %idle
0.10 0.01 0.03 1.15 0.02 98.69
Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn

ChkServd Version: 15.1

 

[jakesully]

have you tried to start the service manually through ssh and see if it leaves a error line up on start? that will explain what exactly is causing lfd to be unable to start.

 

[TheVisitors]

have you tried to start the service manually through ssh and see if it leaves a error line up on start? that will explain what exactly is causing lfd to be unable to start.

service lfd restart

Says OK, OK

But cPanel tells me its not running and I'm still getting those e-mails like crazy.

 

[jakesully]

weird if it service says start was OK or sucessfully and cpanel spams you with lfd is being down then something else is wrong that is failing to detect lfd is runing.

 

[quietFinn]

LFD is not a part of cPanel, you might get better answers here:
ConfigServer Scripts Community Forum • Index page

I suggest you check:
/var/log/lfd.log

maybe you have testing enabled in CSF...

 

[jakesully]

LFD is not a part of cPanel, you might get better answers here:
ConfigServer Scripts Community Forum • Index page

I suggest you check:
/var/log/lfd.log

maybe you have testing enabled in CSF...

lfd is a service inside OS itself not by cpanel or CSF and i dont think he even has got CSF installed, unless he installed CSF first before cpanel/whm but i dont think he did.

 

[quietFinn]

LFD is Login Failure Daemon, included in CSF, ConfigServer Firewall:
ConfigServer Security & Firewall

 

[TheVisitors]

I honestly am not 100% sure what is installed as I used a pre-made image provided by my VPS provider.

I think I'll wipe out this VPS and install cPanel myself. Thus knowing exactly what is or is not installed.

Will report back should that still be an issue.

 

[TheVisitors]

SOLVED

Just a quick follow up.... I solved this by

1) Not depending on my hosting providers pre-made image which comes with cPanel WHM (trail)

2) Not enabling cPHulk. Which by the way DOES seem to include ldf (compare yourself if you're in doubt)

 

[quietFinn]

SOLVED

2) Not enabling cPHulk. Which by the way DOES seem to include ldf (compare yourself if you're in doubt)

LFD (Login Failure Daemon) is not included in cPHulk (if they didn't include it since last night when I installed cpanel/WHM the last time).

 

[JaredR.]

2) Not enabling cPHulk. Which by the way DOES seem to include ldf (compare yourself if you're in doubt)

cPHulk does not include LFD. They provide a similar function (banning log-in attempts based on failures) but they are not in any way related to each other. cPHulk is built into cPanel, while LFD (along with its parent, CSF, of which it is a component) is a completely separate product from a separate company called ConfigServer.

Neither CSF nor LFD exists at all on a cPanel server unless you install them. We do not develop them and we do not distribute them.